Data Controller; GERPA ELEKTRIK TEKSIL SAN VE TIC A.S. (hereinafter referred to as “company” or “Gerpa Elektrik”) in accordance with the Law on the Protection of Personal Data No. 6698 (hereinafter referred to as “KVKK”) and the Communiqué on the Procedures and Principles to be Followed in the Fulfillment of the Disclosure Obligation (hereinafter referred to as the “Communiqué”), this clarification text for the purpose of informing employees about the procedures and principles to be followed in the protection of their personal data in their relations with our company has been edited and announced.

Article 10 of KVKK: “During the acquisition of personal data, the data controller or the person authorized by him/her shall notify the relevant persons; It is obliged to provide information about the identity of the data controller and his/her representative, if any, the purpose for which the personal data will be processed, to whom and for what purpose the processed personal data can be transferred, the method and legal reason for collecting personal data, and the other rights listed in Article 11.”

In any case, we will process your personal data that we specify below;

  • In accordance with the law and good faith,
  • Maintaining the accuracy of the personal data you share and the most up-to-date version as you notify us,
  • For specific, explicit and lawful purposes,
  • In a way that is relevant, limited and proportionate to the purpose for which they will be processed,
  • We will store and process it for the period stipulated in the relevant legislation or required for the purpose for which they are processed,

We inform you that it can be processed under the conditions stipulated by the KVKK and according to the general principles

Basic Definitions in the Law

Personal Data: Any information relating to an identified or identifiable natural person.

Processing of Personal Data: Any operation performed on personal data such as obtaining, recording, storing, preserving, changing, rearranging, disclosure, transferring, taking over, making available, classifying or preventing the use of personal data by fully or partially automatic means or by non-automatic means provided that it is part of any data recording system.

Data Controller: The  natural and legal person who determines the purposes and means of processing personal data and is responsible for the establishment and management of the data recording system.

Explicit Consent: It  is the consent related to a certain subject, based on being informed and explained with free will.

Board: Refers to the Personal Data Protection Board.

Personal Data Relating to Employees

Personal data related to employees may be processed by our Company in accordance with the purposes and processing conditions specified in this text. The personal data subject to processing are as follows:

Identity Data: Name, surname, parents’ name, date of birth, T.R. identity number, gender, marital status, identity card serial sequence number, nationality information, passport information, duty and title information, vehicle license plate family relatives information.

Contact Data:  Phone number, email address, address information, internal company contact information (company phone number, internal phone number, corporate email address, registered email address).

Financial Data: Bank IBAN number, payrolls, file and debt information related to enforcement follow-up files.

Legal Transaction Data: Information in correspondence with judicial authorities, information in the case file, etc.

Professional Experience Data: Education status, in-service education information, certificate and diploma information, language information, courses attended, education and skills, work experience, transcript information.

Visual and Audio Data: Photographs, video recordings, camera records belonging to the real person.

Transaction Information Data: Ip address information, website entry-exit records, transaction records,

Personal Data: Payroll information, disciplinary investigation, entry-exit records, resume information, performance evaluation reports, insurance information, criminal record, leave and return from leave, military status information, department and unit.

Health Data: Health report, blood type, personal health information,  health and maternity leave documents, disability information, device and prosthesis information used.

Criminal Conviction: Information on criminal convictions, information on security measures.

Other Data: Signature, Family Close Information,

 

Purpose of Processing Personal Data

Within the scope of Article 10 of the KVKK and Article 5 of the Communiqué, the personal data of the employees may be processed for the following purposes in accordance with the processing conditions specified in Article 4 of the KVKK:

  • Depending on the service contract; fulfillment of service obligations, fulfillment of employer responsibilities, provision of occupational safety, management, supervision and performance of work,
  • Receiving and evaluating suggestions for the improvement of business processes,
  • Informing you about changes that may occur in our terms of service,
  • Arrangement of all records and documents that will be the basis for processing in electronic (internet / mobile etc.) or physical environment,
  • Execution of contract processes within the scope of the Labor Law and all other legislation,
  • To be able to provide information to public officials upon request and in accordance with the legislation in matters related to public security,
  • Fulfilling legal obligations and exercising the rights arising from the legislation in force,
  • Fulfilling the legal obligation if requested by the relevant authority within the scope of judicial and administrative investigations and if it is mandatory to respond,
  • Execution of Emergency Management Processes
  • Execution of Information Security Processes
  • Fulfillment of obligations arising from the employment contract and legislation for the employees,
  • Execution of Employee Candidate / Intern / Student Selection and Placement Processes
  • Carrying out activities to provide training to employees,
  • Conducting training activities,
  • Carrying out the activities in accordance with the legislation,
  • Execution of legal proceedings,
  • Carrying out business activities,
  • Organization, promotion and event management,
  • Carrying out occupational health and safety activities,
  • Carrying out assignment processes,
  • Carrying out communication activities,
  • Carrying out accounting and finance works,
  • Carrying out storage and archive activities,
  • Ensuring the Security of Movable Goods and Resources,
  • Execution of Remuneration Policy
  • Ensuring the Security of Data Controller Operations
  • Ensuring the security of physical space,
  • Carrying out management activities,
  • Providing information to authorized public institutions and organizations.

 

Method of Collecting Personal Data and Legal Reason

Personal data may be obtained directly from the relevant person, third parties and legal authorities during the establishment of the legal relationship. In this context, personal data; It can be collected verbally, in writing or electronically through tools such as electronic mail, application forms and through written or oral communication channels. In accordance with the legislation, especially the Labor and Social Security Laws, we collect the obligations of the employers arising from the employment contract and the laws completely and correctly through the cameras we place in the workplace building in accordance with the Company’s legal obligation and legitimate interest to provide workplace safety.

In accordance with the provision in Article 5 of the KVKK, personal data cannot be processed without the explicit consent of the person concerned. The law states that explicit consent will not be sought as an exception. Provided that there is a clear provision in the law, provided that it is directly related to the establishment or performance of a contract, the processing of the personal data of the parties to the contract is necessary, it is mandatory for the company to fulfill its legal obligation, it has been made public by the person concerned, the data processing is mandatory for the establishment, use or protection of a right, and it does not harm the fundamental rights and freedoms of the person concerned,  In the event that data processing is mandatory for the legitimate interests of the data controller, personal data may be processed by our Company without seeking explicit consent.

  • Stipulated in the laws
  • Turkish Commercial Code No. 6102,
  • Tax Procedure Law No. 213,
  • Labor Law No. 4857,
  • Social Insurance Law No. 5510,
  • Occupational Health and Safety Law No. 6331,
  • Law No. 6698 on the Protection of Personal Data,
  • Turkish Civil Code No. 4721,
  • Law No. 6098 on Obligations,
  • Law No. 5651 on the Regulation of Publications on the Internet and Combating Crimes Committed Through These Publications
  • Provided that it does not harm the fundamental rights and freedoms of the data subject, the data processing is mandatory for the legitimate interests of the data controller.
  • Provided that it is directly related to the establishment or performance of a contract (the personal data provided by our customers to whom we provide independent audit services is within this scope), it is necessary to process the personal data of the parties to the contract,
  • To be able to provide the requested products and services and to fulfill the requirements of the contracts you have concluded,
  • It is mandatory for the fulfillment of the legal obligation,
  • Data processing is mandatory for the establishment, use or protection of a right,

 

In order for our Company to continue its activities, the personal data specified in Articles 5 and 6 of the KVKK may be processed for the legal reasons stated above in order to provide the purposes specified in this Clarification Text and to fulfill the legal obligations in accordance with the principles and procedures stipulated by the relevant legislation and within the scope of the processing conditions and purposes.

Web page, social media accounts, pictures, videos, etc. sharing and your personal data of special nature can be processed by requesting your explicit consent within the scope of the principle of proportionality. 

To Whom and For What Purpose Personal Data Can Be Transferred

Provided that adequate and effective measures are taken in accordance with the data transfer and processing conditions specified in Articles 8 and 9 of the Law and the security and confidentiality principles determined in the legislation in order to ensure the realization of the above-mentioned purposes; suppliers, shareholders, authorized dealers, private law persons from whom services are received (security, training, audit, event and organization, health, occupational safety, law, etc.), independent audit institutions, financial institutions, domestic business partners, domestic storage, archiving, information technology support companies (server, hosting, program, cloud computing), legally authorized public institutions and private law persons, and transferable.

Retention Period of Personal Data

In accordance with the provisions of KVKK, your personal data processed for the purposes specified in this “Clarification Text on the Processing of Personal Data” will be deleted, destroyed or anonymized by us and continue to be used by us when the purpose requiring processing in accordance with Article 7/f.1 of the KVKK disappears and/or when the time-out periods for which we are obliged to process your data in accordance with the legislation expire, taking into account the Personal Data Retention and Destruction Policy Will.

Rights of the Data Subject

The data subject shall learn whether his/her personal data has been processed, to request information if his/her personal data has been processed, to learn the purpose of processing personal data and whether they are used in accordance with their purpose, to know the third parties to whom personal data have been transferred domestically or abroad, to request correction of personal data if it is incomplete or incorrectly processed, despite the fact that it has been processed in accordance with the provisions of KVKK and other relevant laws,  to request the deletion or destruction of personal data in the event that the reasons requiring the processing of personal data disappear, to request that the personal data be notified to the third parties transferred by our Company in case of deletion, destruction or correction depending on the request, to object to the occurrence of a result against the person himself by analyzing the processed data exclusively by means of automatic systems, to suffer damages due to unlawful processing of personal data has the right to demand the compensation of the damage in case of incurrence.

Exceptions to the Right to Apply

In accordance with Article 28/2 of the Law, it shall not be possible for the persons concerned to benefit from the rights specified in Article 11 of the Law, except for the right to request the compensation of the damage in the following cases.

The processing of personal data is necessary for the prevention of crime or for the investigation of a crime,

Processing of personal data that has been made public by the data subject himself/herself.

Application Method

The person concerned is the Law No. 6698 on the Protection of Personal Data 11. Claims within the scope of the rights enumerated in Article 13 of the KVKK. Article 5 of the Communiqué on the Procedures and Principles of Application to the Data Controller. In accordance with the article, it can be applied by one of the methods described in the application form.

The applications submitted to the Company will be answered within 30 days from the date of receipt of the request to the Company in accordance with Article 13/2 of the KVKK, depending on the nature of the request. However, if the transaction requires an additional cost for the Company, the fee in the tariff determined in the Communiqué on the Procedures and Principles of Application to the Data Controller may be charged by the Personal Data Protection Board. The answers to the application are based on Article 13 of the KVKK. In accordance with the article, it will be delivered to the applicant in written and electronic media.

DATA CONTROLLER CONTACT INFORMATION

 

GERPA ELEKTRIK TEKSIL SAN VE TIC A.S.

Mersis No: 0394004827300011

Web Address www.gerpaas.com , www.gerpaas.com.tr   

E-mail: kvkk@gerpaas.com

Kep Address:  gerpaelektrik@hs01.kep.tr

Address: Yeşilbağlar mh. Selvili sk. No:2 Helis Beyaz Ofis A blok D:105 Pendik, Istanbul Turkey

GERPA ELEKTRIK TEKSIL SAN VE TIC A.S. (hereinafter referred to as the “Company”), it is among our priority principles to protect the privacy of our business partners, customers, suppliers, lessors, especially to protect their fundamental rights and freedoms, to protect the privacy of their private lives, to ensure information security and to protect it; ” We wanted to inform you about “Protection of Personal Data”. GERPA ELEKTRIK TEKSIL SAN VE TIC A.S. It reserves the right to update this Clarification on the Protection of Personal Data text at any time within the framework of changes that may be made in the legislation in force.

Since your personal data may be collected in accordance with Article 10 of the Personal Data Protection Law No. 6698 (“Law”) and the European Union Data Protection Directive (“GDPR”), our obligation to inform you about the method and legal reason for collecting personal data, the purposes for which your personal data is processed by our Company, to which third parties your personal data is disclosed/transferred and for what purposes it is disclosed and your rights that you can use as a data owner exists.

The target audience of this text is all real persons whose personal data are processed by our Company, except for the employees of our Company or the employee candidates who have applied for a job in our Company.

Personal Data Processed:

Identity Information: Identity (name, surname, T.R. identity number,)

Contact Information: Contact  (such as address number, e-mail address, contact address, registered electronic mail address (KEP), telephone number)

Legal Action:                  (Information in correspondence with judicial authorities, information in the case file, etc.)

Customer Transaction:  (Call center records, invoice, bill, check information, box office receipts, order information, request information, etc.)

Physical Space Security Information: (Entry and exit registration information of visitors, camera records, etc.)

Risk Management:        (Information processed for the management of commercial, technical, administrative risks, etc.)

Financial Information:  (Billing Information, Bank Details, Iban No.)

Visual and Audio  Recordings: (Camera Recordings)

 

Data Subject Person Group:

  • Shareholder
  • Potential Buyer of Products or Services
  • Supplier Employee
  • Supplier Representative
  • Product or Service Recipient
  • Visitor

 

 

 

 

 

Processing of Your Personal Data:

 

Within the scope of the Law on the Protection of Personal Data No. 6698 published in the Official Gazette dated 07.04.2016 and numbered 29677 (hereinafter referred to as the “Law”); obtaining, recording, storing, preserving, changing, rearranging, disclosure, transferring, taking over, making available, classifying or reorganizing personal data by fully or partially automatic means or by non-automatic means provided that it is part of any data recording system Any operation performed on the data, such as the prevention of its use, is considered as “processing of personal data”. Both Supplier Relationship and Customer Communication with our Company and GERPA ELEKTRİK TEKSİL SAN VE TİC A.Ş. Your personal data that you have shared within the scope of the Contracts signed as a lessor of services such as product financing etc. will be stored, recorded and updated by our Company in accordance with the Law, may be transferred to third parties such as our business partners with whom we have a contractual relationship and legally authorized public institutions and organizations in accordance with the legislation and may be processed in the ways listed in the Law.

How Your Personal Data Is Collected:

Your personal data; The information you transmit to us through our corporate websites or by e-mail or other means or during our business relations, during the signing of commercial contracts and / or during the commercial relationship process is stored in various ways, provided that it is in verbal, written or electronic media through various channels such as filling out the contact form during your visit to our website and physical forms. (As an example, at a trade fair),

Your personal data, with the explicit consent of our customers and in accordance with Article 5 of the Law on the Protection of Personal Data No. 6698. It is processed on the basis of the legal reasons specified in the article.

Legal Reason for Processing Your Personal Data:

 

Provided that it is directly related to the establishment or performance of a contract, it is necessary to process the personal data of the parties to the contract, fulfillment of our legal obligations,

 

Your personal data may be processed on the basis of the fact that the data processing is mandatory for the legitimate interests of the data controller, provided that it does not harm the fundamental rights and freedoms of the data subject, and on the basis of the reasons for compliance with the law specified in Articles 5 and 6 of the Law on the Protection of Personal Data No. 6698 and the reasons for compliance with the law listed below.

 

  • Stipulated in the laws
  • Turkish Commercial Code No. 6102,
  • Tax Procedure Law No. 213,
  • Law No. 6698 on the Protection of Personal Data,
  • Turkish Civil Code No. 4721,
  • Law No. 6098 on Obligations,
  • Law No. 5651 on the Regulation of Publications on the Internet and Combating Crimes Committed Through These Publications
  • Provided that it does not harm the fundamental rights and freedoms of the data subject, the data processing is mandatory for the legitimate interests of the data controller.
  • Provided that it is directly related to the establishment or performance of a contract (the personal data provided by our customers to whom we provide independent audit services is within this scope), it is necessary to process the personal data of the parties to the contract,
  • To be able to provide the requested products and services and to fulfill the requirements of the contracts you have concluded,
  • It is mandatory for the fulfillment of the legal obligation,
  • Data processing is mandatory for the establishment, use or protection of a right,

 

Purpose of Processing Your Personal Data:

 

Your personal data collected may be processed by the company  in accordance with the basic principles stipulated by the Law and within the conditions and purposes of personal data processing specified in Articles 5 and 6 of the Law  for the following purposes:

 

  • Execution of Emergency Management Processes
  • Execution of Information Security Processes
  • Enforcement of Access Authorizations
  • Conducting Activities in Accordance with the Legislation
  • Execution of Finance and Accounting Affairs
  • Ensuring Physical Space Security
  • Execution of Assignment Processes
  • Follow-up and Execution of Legal Affairs
  • Conducting Communication Activities
  • Execution / Supervision of Business Activities
  • Carrying out Business Continuity Ensuring Activities
  • Execution of Goods / Services Purchasing Processes
  • Execution of Goods / Services Sales Processes
  • Execution of Goods / Services Production and Operation Processes
  • Execution of Risk Management Processes
  • Carrying out Storage and Archive Activities
  • Execution of Contract Processes
  • Follow-up of Requests / Complaints
  • Ensuring the Security of Movable Goods and Resources
  • Execution of Supply Chain Management Processes
  • Ensuring the Security of Data Controller Operations
  • Providing Information to Authorized Persons, Institutions and Organizations
  • Execution of Management Activities
  • Creation and Tracking of Visitor Records
  • It may be processed for the purpose of fulfilling legal obligations such as ensuring occupational health and safety in the company’s workplace and building and supervision.

 

Transfer of Your Personal Data:

 

Personal data, limited to the purposes specified in the fourth article of this text in the event that one of the conditions set forth in Article 5, paragraph 2  of the Law exists, is provided by the company  directly  or indirectly to our domestic shareholders, business partners, suppliers for the purposes of carrying out the business processes,  It can be transferred to its employees, legally authorized public institutions and organizations and legally authorized private law persons provided that the necessary security measures are taken within the framework of the conditions specified in Articles 8 and 9 of the Law. 

In the absence of one of the conditions set forth in Article 5, paragraph 2 of the Law, the transfer of Personal Data is subject to the explicit consent of the person concerned.

Your Rights as a Data Subject:

 

In relation to the processing of your Personal Data, GERPA ELEKTRİK TEKSİL SAN VE TİC A.Ş. by applying for Article 11 of the Law on the Protection of Personal Data No. 6698. In accordance with the clause:

  1. To learn whether your personal data is processed or not,
  2. If your personal data has been processed, to request information about it,
  3. To learn the purpose of processing your personal data and whether they are used in accordance with their purpose,

ç. To know the third parties to whom your personal data is transferred domestically or abroad,

  1. Requesting the correction of your personal data if it is incomplete or incorrectly processed,
  2. Section 7 of the Act Requesting the deletion or destruction of your personal data within the framework of the conditions stipulated in the article,
  3. Requesting that the transactions carried out in accordance with subparagraphs (d) and (e) above be notified to the third parties to whom your personal data is transferred,
  4. to object to the occurrence of a result against you by analyzing the processed data exclusively by means of automated systems, and

ğ. To request the compensation of the damage in case you suffer damage due to the processing of your personal data contrary to the Law,

 

By filling out the Application Form for your rights listed above  in  accordance with the instructions written, you can send a signed copy of the form to GERPA ELEKTRİK TEKSİL SAN VE TİC A.Ş. Yesilbaglar mh. Selvili sk. No:2 Helis Beyaz Ofis A blok D:105 Pendik, Istanbul Turkey with your identification documents  in person with your identification documents, you can send it through a notary public or other methods specified in the Law. Depending on the nature of your request, your applications will be concluded free of charge as soon as possible and within thirty days at the latest; however, in case of additional cost, the Company reserves the right to charge you a fee according to the tariff to be determined by the Personal Data Protection Board.

 

DATA CONTROLLER CONTACT INFORMATION

 

GERPA ELEKTRIK TEKSIL SAN VE TIC A.S.

Mersis No: 0394004827300011

Web Address www.gerpaas.com , www.gerpaas.com.tr   

E-mail: kvkk@gerpaas.com

Kep Address:  gerpaelektrik@hs01.kep.tr

Address: Yeşilbağlar mh. Selvili sk. No:2 Helis Beyaz Ofis A blok D:105 Pendik, Istanbul Turkey

This information is provided in accordance with Article 10 of the “Law on the Protection of Personal Data” numbered 6698 to GERPA ELEKTRİK TEKSİL SAN VE TİC A.Ş. (“Company or Gerpa Elektrik“) Prepared for you.

In accordance with the Law on the Protection of Personal Data No. 6698 (“Law”), all kinds of information and documents that introduce the person related to the name / surname, address, place and date of birth, telephone number, electronic mail address, education status, education information, work experiences, foreign language knowledge, seminars, conferences and certificate programs attended and references in the resume of the person are within the scope of personal data.

Your personal data mentioned above; As the “Data Controller”, Gerpa Elektrik may be processed for the scope and purposes described below.

  1. The Purpose for which the Personal Data will be Processed:

Your personal data will be processed for the purposes of evaluating your job application request and suitability for the relevant position, conducting and concluding the recruitment processes within the framework of Çanak Hotel human resources policies, evaluating your application in similar positions that will occur later in case the result is negative, contacting you in this context and developing and improving the recruitment  principles applied by Gerpa Elektrik.

  1. To Whom and For What Purpose the Processed Personal Data Can Be Transferred:

Your personal data processed by Gerpa Elektrik will be shared with the competent authorities for the purpose of Gerpa Elektrik fulfilling its  Legal obligations.

  1. Method of Collecting Personal Data and Legal Reason:

Your  personal data is obtained for the purposes of carrying out and concluding the recruitment processes within the framework of Gerpa Elektrik human resources policies and communicating with you in this context, and your personal data collected for explicit consent legal reasons are collected by automatic or non-automatic methods, through various collection methods including verbal, written and electronic media.

  1. Rights of the Data Owner Listed in Article 11 of the Law:

Pursuant to Article 11 of the Law, as a personal data owner, by applying to Gerpa Elektrik  in writing or by other methods determined by the Personal Data Protection Board, to learn whether your personal data is processed, to request information about your personal data if it is processed, to learn the purpose of processing your personal data and whether it is used in accordance with their purpose, to learn whether your personal data is processed or not, to third parties at home or abroad if it  is transferred, to know the third parties to whom your personal data is transferred, to request the correction of your personal data if it is incomplete or incorrectly processed, to request that the transaction carried out within this scope be notified to the third parties to whom the personal data is transferred, to request the deletion or destruction of your personal data in the event that the reasons requiring the processing of your personal data disappear, despite the fact that your personal data have been processed in accordance with the provisions of the Law and other relevant laws, and In this context, you have the right to request that the processing carried out in this context be notified to the third parties to whom the personal data is transferred, to object to the occurrence of a result against you by analyzing the processed data exclusively by means of automatic systems, and to request the compensation of the damage if you suffer damage due to the unlawful processing of your personal data.

In order to exercise your above-mentioned rights, you must submit a wet signed copy of your request containing the necessary information to identify you and your explanations of the rights you want to exercise from the rights specified in Article 11 of the Law to GERPA ELEKTRİK TEKSİL SAN VE TİC A.Ş. address, you can  send it personally by hand, you can send  an e-mail to the kvkk@gerpaas.com address, you can send it through a notary public or by other methods specified in the Law.

Your requests included in your application will be concluded free of charge by Gerpa Elektrik  as soon as possible and within thirty days at the latest according to the nature of the request. However, if the transaction requires an additional cost for Gerpa Elektrik, the fee in the tariff determined by the Personal Data Protection Board will be charged.

 

Gerpa Elektrik requests your explicit consent for the processing of your personal data for the purpose of carrying out recruitment processes:

 

Explicit Consent Statement

In accordance with the Law on the Protection of Personal Data No. 6698, I have been informed about the purpose for which my personal data will be processed by Gerpa Elektrik, to whom and for what purpose the processed personal data can be transferred, the method and legal reason for collecting personal data and my other rights listed in Article 11 of the Law.

Evaluation of my suitability for the position I applied for, execution and conclusion of recruitment processes within the framework of Gerpa Elektrik Human resources policies, All kinds of personal efficiency I conveyed  to Gerpa Elektrik, including the notes taken by the human resources officer, Gerpa Elektrik  Recording, storage, modification, updating, periodically checking, rearranging, classifying,  requesting my references in my resume that I have chosen voluntarily and/or other references personally reached  by Gerpa  Elektrik are called by the Gerpa Elektrik  Human Resources department to obtain information / data about my predisposition to work from the relevant persons and to obtain this information / data To be recorded by  Gerpa Elektrik, to share my personal data with the competent authorities in order to fulfill the legal obligations of Gerpa Elektrik, to keep my personal data mentioned above in Gerpa Elektrik Human Resources pool,

 

 

 I give my explicit consent.                I do not give explicit consent.

 

 

I know that I can withdraw my explicit consent at any time, in which case I can forward my request to you in one of the ways presented to me in the clarification text.

 

 

Name-Surname of the Candidate:                                                             Signature:                                                                     History: